VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2021-40165

CVE-2021-40165

Description

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Affected products

43
  • Autodesk/Autocad3 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*range: >=2020,<2020.3.2
  • Autodesk/Autocad Advance Steel
    cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Civil 3d
    cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Design Review4 versions
    cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
  • Autodesk/Dwg Trueview
    cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Fusion
    cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*
    Range: >=2.0.10356,<2.0.11405
  • Autodesk/Infrastructure Parts Editor3 versions
    cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*range: >=2019,<2019.2.2
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:2021:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:2022:*:*:*:*:*:*:*
  • Autodesk/InfraWorks14 versions
    cpe:2.3:a:autodesk:infraworks:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:autodesk:infraworks:*:*:*:*:*:*:*:*range: >=2019,<2019.3
    • cpe:2.3:a:autodesk:infraworks:2019.3:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.0:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.0:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.1:*:*:*:*:*:*:*
  • Autodesk/Inventor
    cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.6
  • Autodesk/Navisworks
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.7
  • Autodesk/Revit2 versions
    cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*range: >=2019,<2019.2.4
    • cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*
  • Autodesk/Storm And Sanitary Analysis3 versions
    cpe:2.3:a:autodesk:storm_and_sanitary_analysis:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:*:*:*:*:*:*:*:*range: >=2020,<2020.3.1
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:2019:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:2022:*:*:*:*:*:*:*
  • Autodesk/Image Processing componentdescription
  • Autodesk/Autodesk Image Processing componentllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.